222ab53f3e167a670fd992459073a74c_JaffaCakes118

General

Target

222ab53f3e167a670fd992459073a74c_JaffaCakes118
Size

3.4MB
MD5

222ab53f3e167a670fd992459073a74c
SHA1

3c7ba8e1f3c8ba62822dd81438af1ab53c4c4674
SHA256

0a871b977127bd4e76f681a9aa7a0b54c64b6a3f2d71ca82510cd0d400386c55
SHA512

92d7658c7b73379e839475ed93c2d4d3e9bbb498500426a718696ad255a924d498a1348c19e5889ec5a373baa1e89217379d7dfc65d1b3e2ae24de23bf28f2b3
SSDEEP

98304:qrfSZIKw5XpREg5Xsgw7J0LUh4amhqVOGcjfV1VnJZVTk:YTVXlsFCLUCsVOV/xVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
222ab53f3e167a670fd992459073a74c_JaffaCakes118

Files

222ab53f3e167a670fd992459073a74c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

170af8c4a643df0aff385141944d829b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
Sleep
GetTickCount
FreeLibrary
LocalFree
GetProcessHeap
CreateFileW
ExitProcess
GetStartupInfoW
GetCommandLineW
ReadFile
RaiseException
FormatMessageW
GetFileType
GetModuleHandleA
HeapReAlloc
GetConsoleMode
CreateEventW
HeapSetInformation
WriteConsoleW
TlsFree
GetFileAttributesW
RtlUnwind
LCMapStringW
GetModuleFileNameA
GetOEMCP
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
FindNextFileW
IsValidCodePage
FindFirstFileW
VirtualAlloc
LocalAlloc
GetVersionExW
ReleaseMutex
GetFileSize
EncodePointer
VirtualFree
lstrlenW
GetModuleHandleExW
CreateDirectoryW
UnmapViewOfFile
GetExitCodeProcess

user32

LoadStringW
DispatchMessageW
ShowWindow
ReleaseDC
CreateWindowExW
GetWindowLongW
GetDC
SendMessageW
GetClientRect
EnableWindow
LoadCursorW
GetParent
EndDialog
SetWindowTextW
SetTimer
GetSysColor
PeekMessageW
BeginPaint
SetCursor
KillTimer
GetWindow
GetWindowTextW
UpdateWindow
SystemParametersInfoW
MessageBoxA

Sections

.data
Size: - Virtual size: 612KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

170af8c4a643df0aff385141944d829b

Headers

File Characteristics

Imports

kernel32

user32

Sections

.data Size: - Virtual size: 612KB

.idata Size: 2KB - Virtual size: 1KB

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3.4MB - Virtual size: 3.4MB

.data
Size: - Virtual size: 612KB

.idata
Size: 2KB - Virtual size: 1KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3.4MB - Virtual size: 3.4MB